Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/ZoFV4x2tyXT6J_JK-aC-19W61aE.roa
File: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (raw, json)
Hash identifier: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=
Subject key identifier: 66:81:55:E3:1D:AD:C9:74:FA:27:F2:4A:F9:A0:BE:D7:D5:BA:D5:A1
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019422FB010A8BA67A4287B5E0081A86ABF7
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/ZoFV4x2tyXT6J_JK-aC-19W61aE.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35327
IP address blocks: 2001:67c:e90::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:01:0a:8b:a6:7a:42:87:b5:e0:08:1a:86:ab:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=668155e31dadc974fa27f24af9a0bed7d5bad5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:13:38:92:1a:51:8a:5a:f6:81:42:11:27:
87:ae:50:7f:ea:86:51:fc:db:cd:18:19:1a:43:3e:
e8:c5:c4:9f:1c:68:21:b3:1c:c2:f0:66:4e:08:bc:
bb:a4:ff:05:fa:1f:87:14:55:9c:18:01:66:3d:f7:
1f:3a:43:2d:5b:60:ae:b0:a6:1d:6c:65:ca:75:6d:
b4:8a:ee:fd:43:fc:a3:a9:87:30:c6:af:00:7f:37:
a0:ee:44:88:8a:0c:9a:d7:0b:96:72:88:7f:d9:bb:
49:81:14:92:7b:b2:bf:d4:b1:6f:24:0f:49:b3:a2:
51:04:27:73:f4:ea:25:aa:ef:96:42:70:9c:07:27:
2c:5c:0e:ee:6d:26:4c:d5:b6:58:c1:5a:7d:7f:50:
5a:c7:cb:d9:a1:50:57:b5:a6:78:ed:93:d3:8e:ff:
a6:e2:d1:cb:5c:5b:db:e7:85:d1:06:de:75:6e:08:
08:4f:2f:26:05:3a:f9:17:a4:7b:fe:d9:f0:d7:df:
6d:78:13:08:a3:33:9d:81:24:83:bc:d9:8c:28:b9:
f3:6d:65:55:39:e6:0c:b5:9b:4d:b4:f6:40:5e:cd:
ac:53:1d:78:a1:a5:32:e2:e2:2e:c6:d3:a7:16:7e:
5d:61:98:d4:cb:52:4c:85:6c:aa:e4:22:eb:12:8e:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:55:E3:1D:AD:C9:74:FA:27:F2:4A:F9:A0:BE:D7:D5:BA:D5:A1
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/ZoFV4x2tyXT6J_JK-aC-19W61aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e90::/48
Signature Algorithm: sha256WithRSAEncryption
43:90:2e:c0:ec:74:ea:56:c7:f0:6b:d8:78:71:35:f5:ba:4f:
f6:e1:67:f3:83:fc:10:03:d7:51:fc:a7:41:30:3a:a5:4b:5c:
99:99:73:30:d6:cc:43:cc:c6:f9:e2:25:84:39:21:30:59:be:
0f:c1:13:0b:3f:a0:ae:ef:81:2b:e9:5f:e1:53:7c:f8:19:8d:
56:f6:1b:64:8f:08:1d:19:48:49:d7:23:89:37:67:de:31:5d:
8c:26:37:62:6a:2c:55:79:12:98:d0:0e:04:fe:38:58:35:e2:
43:fb:74:72:ad:02:a1:1e:14:e7:bf:39:d2:45:5f:78:e8:8e:
e7:88:11:02:86:41:88:c2:18:dd:37:89:ab:4b:dd:69:65:40:
18:7b:70:f7:50:01:83:95:ba:98:2c:47:2d:74:54:91:6f:56:
5c:e9:ed:5b:b3:72:39:ba:68:c3:3d:15:85:b6:b5:b5:da:be:
6e:f9:34:ce:2c:31:16:dc:f7:67:98:c2:5c:ed:d1:81:c8:3f:
f6:50:45:e2:61:f3:20:78:f5:50:b0:d8:86:4e:56:11:a4:32:
b0:df:d6:a6:8e:ea:da:b6:8b:e5:fe:8b:b1:1a:e7:35:19:db:
c5:52:be:99:a8:27:82:3c:09:76:e2:13:90:d7:41:35:b3:38:
bb:49:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net